Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
File: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft (raw, json)
Hash identifier: oym39qixMEcYv7ce0C1VeiHFZ5cR+PUhMhAMMtEDDls=
Subject key identifier: 6F:48:BA:F0:6A:C0:57:52:5D:DD:62:5B:6C:53:23:7E:8F:C7:BA:ED
Authority key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Certificate issuer: /CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Certificate serial: 7D11D8D4918687A571F2BE4392604D4A6F954D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
Manifest number: 01AF
Signing time: Sun 29 Mar 2026 06:40:33 +0000
Manifest this update: Sun 29 Mar 2026 06:35:33 +0000
Manifest next update: Mon 30 Mar 2026 07:44:33 +0000
Files and hashes: 1: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl (hash: S9zk6GDM8LB3cOtqwakupmyEFJnAZETWP0KXEzWXB9Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:11:d8:d4:91:86:87:a5:71:f2:be:43:92:60:4d:4a:6f:95:4d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Validity
Not Before: Mar 29 06:35:33 2026 GMT
Not After : Mar 30 07:44:33 2026 GMT
Subject: CN=6F48BAF06AC057525DDD625B6C53237E8FC7BAED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:b7:4f:82:64:a2:7a:16:18:10:1a:06:af:
48:44:55:8d:5a:0c:ac:0d:51:a5:7d:58:7e:e1:d5:
c4:70:f6:0b:43:64:24:2f:d2:ad:60:b9:cf:4c:9b:
9b:b4:db:63:ae:3b:e2:7f:5b:32:c4:51:d2:02:8c:
9d:9f:74:bc:a9:0b:1f:d7:fd:7b:f1:df:21:3e:32:
46:17:ca:9f:db:2d:fb:4d:00:99:f5:34:e7:a1:ce:
42:cc:86:d2:55:e4:e2:df:3c:88:a0:fc:0f:4a:78:
72:14:d2:63:4e:7f:f7:d7:45:dd:8e:60:15:4e:2a:
83:d2:83:cd:76:d6:0e:8c:48:95:8e:5b:d1:3c:ae:
e3:9b:11:bc:e1:b0:9b:92:0a:e4:94:57:d0:5d:95:
bb:3e:4b:8d:f6:e4:ea:c8:3a:44:0f:ff:fa:21:1a:
56:89:7f:f4:20:50:62:96:80:c8:c1:c2:cb:e0:71:
be:3c:a7:3b:eb:82:42:a5:ed:91:0f:c1:1f:d6:4b:
29:f4:c7:00:d9:a0:0a:14:82:db:a8:32:2c:34:bd:
f4:c4:d6:bb:e1:57:04:51:55:10:22:64:74:05:91:
0d:70:ad:80:c7:00:5d:7c:59:a7:0b:8c:e2:f7:84:
2f:a3:9f:b9:bf:8c:62:4c:94:60:68:3f:97:33:e5:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:BA:F0:6A:C0:57:52:5D:DD:62:5B:6C:53:23:7E:8F:C7:BA:ED
X509v3 Authority Key Identifier:
keyid:1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:88:77:71:11:7c:b8:50:ff:79:26:c0:0e:c0:dc:8a:d0:
70:a3:8d:b2:d6:1f:26:44:c1:e9:97:4a:d4:36:db:dc:d0:49:
f9:76:cf:bb:1f:07:79:c0:40:e9:6b:3d:2b:23:3a:99:39:09:
38:30:27:33:15:d0:9d:35:9a:1e:0a:a6:22:7b:9a:c5:dc:0b:
50:4b:99:7c:a4:18:5a:86:ba:86:d9:60:04:94:1a:cb:d1:37:
87:6f:5a:1f:3c:8c:f2:e3:ba:f3:56:54:67:d0:29:e2:b2:1c:
26:ee:08:f2:93:a2:b6:dd:9d:69:c9:b4:ed:cf:dc:0c:2c:3e:
d2:4d:54:f8:55:42:a0:76:a3:23:ce:cc:f5:24:3d:4a:39:d7:
67:dc:44:81:75:d9:49:1a:05:1d:fa:c8:bf:80:de:eb:44:e5:
52:84:14:a9:6b:3c:e2:f5:77:3a:77:4a:f0:ed:c2:86:1f:37:
be:04:a2:07:7c:e3:42:b7:22:73:74:3e:d4:46:c8:7a:85:98:
0f:d4:a3:f5:55:57:ce:6a:79:2f:41:2c:67:01:66:8c:f4:6f:
d2:8f:bc:7e:7f:bd:6a:20:ca:e9:cd:e2:09:48:77:20:36:d5:
61:91:96:08:a7:71:12:4b:8a:0f:a3:37:b6:02:e5:3d:a4:f3:
9d:bc:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:47 2026 by rpki-client